Situation dashboard system and method from event clustering

摘要

A computer-implemented method is provided that is stored on computer readable non-transitory media. One or more data fields are accessed within a file. Accessed data field, are mapped mapping on a display computer system. The accessed one or more data fields are from one or more data sources that relate to situations from clustering messages received from managed infrastructure. The mapping being performed based on a input of the situation summaries using a graphical user interface. Displayed on the display computer system are one or more dashboards of situations relative to summaries from clustering messages received from managed infrastructure. The one or more dashboards include at least one of actions that a user can take relative to clustered messages.

主权项

1. A computer-implemented method stored on computer readable non-transitory media, comprising:
receiving messages at an extraction engine to communicate with a managed infrastructure that includes physical hardware, and receiving messages from the managed infrastructure; providing a sigalizer engine that determines one or more common characteristics of events and producing clusters of events relating to the failure or errors in the managed infrastructure, the signalizer engine determining one or more common characteristics of events and producing clusters of events relating to the failure or errors in the managed infrastructure, the signalizer engine using a source address for each of an event and a topology of the managed infrastructure which represents a node to node connectivity at the signalizer engine with an assignment of a graph coordinate to the event with an optional subset of attributes being extracted for each event, the signalizer engine inputting a list of devices and a list a connections between components or nodes in the managed infrastructure; where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in a physical hardware in the managed infrastructure directed to supporting the flow and processing of information; and displaying on a display computer system a dashboard of situations relative to summaries from clustered messages received from managed infrastructure, wherein the dashboard includes at least one of actions that a user can take relative to clustered messages.